TH Privacy Notice is a notice issued to individuals who performed commercial transactions with TH. It outlines the use and protection of individual personal data information which are process by TH as “User Data” in accordance with the Personal Data Protection Act 2010
TH Privacy Notice
Will it take effect immediately if I withdraw my consent to receive marketing or promotion materials / information?
TH may take fourteen (14) working days before the consent withdrawal appears in the system. The notification of withdrawal must go through the verification process across TH groups. Therefore, you may still receive the marketing or promotion material / information during that stipulated period.
TH can only deny your request to access your personal data when there is insufficient information to confirm your identity.
TH commercial transactions, irrespective of whether it is of contractual in nature, including any matters pertaining to products and services offered by TH. It also includes gathering of individual personal data that has the potential to conduct transactions with TH.
PDPA is an act enacted by the Malaysia Government and was established on 15 November 2013 to protect individual personal data and sensitive personal data in commercial transaction. PDPA has seven principles of information management practices that must be adhered, namely: -
- General Principle;
- Notice and Choice;
- Principle of Disclosure;
- Principle of Security;
- Principle of Storage;
- Principle of Data Integrity; and
- Principle of Access
What security measures are taken to ensure that my personal data is secured should THs give to a third party?
If TH provides my personal data to a permitted third party, TH will ensure that they have a similar obligation to protect your personal data given to them accordingly
There are several conditions that allow others to access your personal data, namely:
- If you are below the age of 18 years, only legitimate account custodian is allowed
- Other entities within TH such as its subsidiaries, and its associates
- Agents and our service provider with whom we have contractual agreements for some of our functions, services and activities.
- Our strategic partner and advisor / consultant.
- Enforcement agencies, regulatory and government, as permitted or required by law, allowed by any court or to fulfil obligations to regulatory authorities.
- Party authorized by you.
TH is taking comprehensive measures to ensure your personal data security and confidentiality is protected via physical security, technical and IT process requirement.
All individuals and organizations that process your personal data must comply with the rules set by the PDPA, except for the Federal and State Government.
TH will only retain your personal data for as long as necessary to fulfill the purpose for which it was collected or to comply with legal requirements and regulations as well as TH internal requirements.